Lucene search
RedhatCVELIST:CVE-2016-0792HistoryApr 07, 2016 - 11:00 p.m.
CVE-2016-0792
2016-04-0723:00:00
redhat
www.cve.org
7
Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando.
References
rhn.redhat.com/errata/RHSA-2016-1773.html
access.redhat.com/errata/RHSA-2016:0711
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24
www.contrastsecurity.com/security-influencers/serialization-must-die-act-2-xstream
www.exploit-db.com/exploits/42394/
www.exploit-db.com/exploits/43375/
Related
exploitpack
exploitpack
Jenkins 1.650 - Java Deserialization
2017-07-30 00:00:00
ubuntucve
ubuntucve
CVE-2016-0792
2016-04-07 00:00:00
checkpoint_advisories
checkpoint_advisories
Jenkins CI Server XStream Insecure Deserialization (CVE-2016-0792)
2016-05-26 00:00:00
mageia
mageia
Updated jenkins-remoting packages fix CVE-2016-0792
2016-05-05 19:26:44
prion
prion
Design/Logic Flaw
2016-04-07 23:59:00
exploitdb
exploitdb
Jenkins < 1.650 - Java Deserialization
2017-07-30 00:00:00
Jenkins - XStream Groovy classpath Deserialization (Metasploit)
2017-12-19 00:00:00
nessus
nessus
Jenkins < 1.642.2 / 1.650 Java Object Deserialization RCE
2016-02-29 00:00:00
Fedora 23 : jenkins-1.625.3-3.fc23 / jenkins-remoting-2.53.3-1.fc23 (2016-641c8b4eb2)
2016-03-18 00:00:00
RHEL 7 : jenkins (RHSA-2016:0711)
2018-12-04 00:00:00
packetstorm
packetstorm
Jenkins Java Deserialization
2017-07-30 00:00:00
Jenkins XStream Groovy Classpath Deserialization
2017-12-19 00:00:00
saint
saint
Jenkins groovy.util.Expando Java deserialization vulnerability
2017-08-15 00:00:00
Jenkins groovy.util.Expando Java deserialization vulnerability
2017-08-15 00:00:00
Jenkins groovy.util.Expando Java deserialization vulnerability
2017-08-15 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:29:28
cve
cve
CVE-2016-0792
2016-04-07 23:59:03
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0162)
2016-05-09 00:00:00
Jenkins Deserialization Vulnerability - CVE-2016-0792
2017-08-10 00:00:00
Fedora Update for jenkins-remoting FEDORA-2016-0
2016-03-18 00:00:00
seebug
seebug
Jenkins δ½ζιη¨ζ· API ζε‘θ°η¨ ε―θ΄θΏη¨ε½δ»€ζ§θ‘
2016-02-26 00:00:00
XStream εεΊεεζΌζ΄
2016-03-02 00:00:00
metasploit
metasploit
Jenkins XStream Groovy classpath Deserialization Vulnerability
2017-11-07 14:46:42
zdt
zdt
Jenkins < 1.650 - Java Deserialization Exploit
2017-07-31 00:00:00
Jenkins XStream Groovy classpath Deserialization Exploit
2017-12-19 00:00:00
nvd
nvd
CVE-2016-0792
2016-04-07 23:59:03
fedora
fedora
[SECURITY] Fedora 23 Update: jenkins-1.625.3-3.fc23
2016-03-17 21:00:40
[SECURITY] Fedora 22 Update: jenkins-1.609.3-6.fc22
2016-03-17 21:25:57
[SECURITY] Fedora 23 Update: jenkins-remoting-2.53.3-1.fc23
2016-03-17 21:00:40
redhat
redhat
freebsd
freebsd
jenkins -- multiple vulnerabilities
2016-02-24 00:00:00